CVE-2007-2955

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.03%

Published

Aug 9, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.

Affected Products (4)

symantec · norton_antivirusvulnerable

symantec · norton_internet_securityvulnerable

symantec · norton_system_worksvulnerable

References (18)

http://secunia.com/advisories/25215

http://secunia.com/secunia_research/2007-53/advisory/

Vendor Advisory

http://www.securityfocus.com/bid/24983

http://www.securitytracker.com/id?1018545

http://www.securitytracker.com/id?1018546

http://www.securitytracker.com/id?1018547